c0e85b43477f8b54cdcc73c6e451d1ece0de390daca6f2cae43ea753693c6fe9

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:68cc662457b3c7d65662e14fa511146327cd1b4195e8c1e4b180c49fbc5b854f

Sharing

Copy URL Twitter E-mail

General

Target
68cc662457b3c7d65662e14fa511146327cd1b4195e8c1e4b180c49fbc5b854f.zip
Size 1KB
Sample260817-m4vjjay1by
SHA256 c0e85b43477f8b54cdcc73c6e451d1ece0de390daca6f2cae43ea753693c6fe9
MD5 46e22b5d2045a49717993b56022f49f6
SHA1 d960145ea3f1243fe0e4705ce161afd98f89b12c
SHA512 27c791fdc73f21a69978c37ec468c35c9c6d2d30734140bee5e0602973cabd1e7cd7dde4110eaaa687f8ba8c15f705527441907329d3bb06a21873c45615a530
TLSH
T17D2193C6DAF83DBCC7008177C5D64601A3034B16C9104BEF44FD2651B9AA9C74ABC6BD
MD5 SHA1 SHA512 TLSH

Score

10^/10

execution

Malware Config

Extracted

Language

Source

URLs

hta.dropper
https://faturaeletronicapt.com/h/estagio1.php?r=2412

Targets

- Target
  Fatura Eletronica-GVKLFR.lnk
- Size 2KB
- SHA256 f83ee1c1a35a98cc69bbb29bd2f2bf20367ae073f2877e418d015be10c87e75f
- MD5 bbc0912a7a124b1e5764cc0980977807
- SHA1 a36077399b3456b6053de4f1d9a1e136755bed8b
- SHA512 9d5beede33d5c434f04a417310d27c1fc81ba9c8a3040a717c531ac7c5de10b3ba45fb927d8e4c72f75b711c914b7f7a96291b81b6e70cec7b6bd63b5f10c802
- TLSH
  T1424137942EE541D8F2BF8E72ECBE6B90887BBD413D34C54E0890824C0836B41E877B63
- MD5 SHA1 SHA512 TLSH
Score

10^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Extracted

Targets

Badlisted process makes network request

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2